Stand-by Redundancy 


When primary component fails, standby component is started 
up. 

Stand-by spares are cold spares => unpowered 
Switching equipment assumed failure free 


Let X { denote the lifetime of the i-th component from the time 
it is put into operation until its failure. 

System lifetime: 

n 

X sys = 2 X ‘ 
i = 1 
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M-of-N System 

Starting with N components, we need any M components 
operable for the system to be operable. 

Example: TMR 

* T MR (0 = *,(0* 2 (0* 3 (0 + *, (0* 2 (0(l-* 3 (0) 

+ *, (0(1 - *2 (0)* 3 (0 + (1 - *, (0)*2 (0*3 (0 

Where R L (t) is the reliability of the i-th component 
if *,(0 - *,(0 - * 2 (0 - * 3 (0 - *(0 then 

R TMR (t) = R\t) + 3R 2 m-R(t)) 

= R\t) + 3R\t)-3R\t) 

= 3R\t)-2R\t ) 
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Reliability Block Diagram 

Series Parallel Graph 

- a graph that is recursively composed of series and parallel 
structures. 

- therefore it can be “collapsed” by applying series and/or 
parallel reduction 

- Let Q denote the condition that component i is operable 

» 1 = up, 0 = down 

- Let S denote the condition that the system is operable 

» 1 = up, 0 = down 

- S is a logic function of C’s 
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Reliability Block Diagram 


Example 



5 = ( c, + a + c 3 )(c 4 c 5 )(c 6 + c 7 c g ) 


+ => parallel (1 ofN) 

. => series (N of N) 
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K of N system 


Example 2-of-3 system 


*S = (C 1 C 2 +C 1 C 3 + C 2 C 3 ) 


may abbreviate 


S = A (C,C 2 C 3 ) 


draw as parallel 



2-of-3 
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Example: Bus-Guardian 



pass transistor 


bus 


control logic 


• assume X for transistor & logic X = 2 xl 0 5 

• 50/50 split: fail-on/fail-off 


Two failure states for system 

•Qa = failed active (babbling) with X A 
•Qp = failed passive with X p 
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Example: Bus-Guardian 

Active Failure 

- if any one bus guardian is correct then no babble possible 

- thus we use 1 -of-N parallel system model 



2(0 = 170(0 

i = l 

with Q t (t) = 1 - e~ Xjt 
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Example: Bus-Guardian 

Solution - Parallel 

if any one bus guardian is correct then no babble possible 
1-of-N parallel system model 


g(0 = (1 - - e- v )(l - e"^') 


~k A t 


~k A t 


= l-3e Xj + 3e ^ -e ^ 


-2 k A t _-3X A t 


e.g. with X A =10 5 / h and t = 1000/z 


\ A t = 0.01 
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Example: Bus-Guardian 

compute: Q(t ) = 1 - 3e~ Xj + 3e~ 2XAt - e~ 3XAt 

Q(l000h) = 1 - 3(0.9900498) + 3(0.9801987) - (0.9704455) 

= 1.2 xlO -6 

compute: 

Q(t ) = (1 - <T V )(1 - e~ XAt )(l - e~ Kt ) 

= {l-e~ Kt y 

0(1000/*) = 0.9851243 xlO -6 
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in general: danger of cancellation 
=> catastrophic results, 

=> legal issues (even though one 
should realize what the fail rates really 
mean) 












Example: Bus-Guardian 


oo 


00 


MTTF a = fR(t)dt =f 1 - Q(t)dt 


0 


oo 


0 


f(3e~ kAt -3e~ 2Kt +e~^ At )dt 


0 


-X,£ 


X 


+ 


-2 \ A t 


1 


_ oo 


'v4 


2X 




3X 


( — 3 X^ ^ 




Jo 


simplification: 


-■V 


-A ^ 


= 0 as t —;> oo 
= 1 with t = 0 


MTTR = 


1 


A 


X, 2X„ + 3X 


-A 


•A 


*A 


(3_ l + i )Xl0 


= 1.83 >d O 5 /z 


3 drivers result 
in approx. 
MTTF of twice 
and not three 
times that of 
single driver 
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Example: Bus-Guardian 

Passive Failure 

- any one of N bus guardians can take out subsystem 

- thus we use series system model 


D 

Rio-nw 

i = \ 


= e 


-2> 

i i =1 


= e 


-3 \t 


Given X = 1x10 


-5 


t = lOOOh 


R(t) = e~ 3Xt =0.9704455 


MTTF = 


1 


X 


= 33333 h 


sysp 
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Example: Bus-Guardian 

summary 

- active failure => parallel => Qa 

- passive failure => series => Qp 

- whole system fails if either mode occurs => series 
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What is the unreliability Qa\ 


Two approaches to compute Q(t) at 1 OOOh 


? 


1) Q{t) = (l-e‘^')(l-e'*")(l-<?“'■") 

= 1 - 3e _v + 3e 






At £? 


2) MTTF a = 1.8333 xLO 5 

1 

using MTTF = — we compute X and use 

A 


Q(0 = (l-e- Xt ) 


Now we compute Q(1000) and ... 





What is 
wrong? 
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